StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

POphp: grabbing user info from database, is this code secure?
primarykey
Id
3425267
data
AcceptedAnswerId
3425315
AnswerCount
3
ClosedDate
CommentCount
0
CommunityOwnedDate
CreationDate
2010-08-06T15:27:43.087
FavoriteCount
2
LastActivityDate
2010-08-06T15:42:08.020
LastEditDate
LastEditorUserId
0
OwnerUserId
267304
ParentId
0
PostTypeId
1
Score
0
ViewCount
137
LastEditorDisplayName
text
Body
So i was wondering if i this is OK or if theres another better and secure solution to grab info from the database. <pre><code>if (isset($_SESSION['user_id'])) { $string = mysql_query("SELECT * FROM users WHERE id = '$_SESSION[user_id]'"); $v = mysql_fetch_array($string); } </code></pre> Because I was thinking maybe its possible to hack the "session" and change user_id to another and woops they get access to any user... Thank you
Tags
<php>
Title
php: grabbing user info from database, is this code secure?
singulars
PostAcceptedAnswerId
1. PO
 singulars
 PostTypePostTypeId
 PTAnswer
PostParentId
1. This table or related slice is empty.
PostTypePostTypeId
1. PTQuestion
UserLastEditorUserId
1. This table or related slice is empty.
UserOwnerUserId
1. USKarem
plurals
PostLinksPostIdRelatedPostId
1. PL
 singulars
 LinkTypeLinkTypeId
 LTLinked
PostLinksRelatedPostIdPostId
1. This table or related slice is empty.
PostsAcceptedAnswerId
1. This table or related slice is empty.
PostsParentIdCreationDate
1. PO
 singulars
 PostTypePostTypeId
 PTAnswer
2. PO
 singulars
 PostTypePostTypeId
 PTAnswer
3. PO
 singulars
 PostTypePostTypeId
 PTAnswer
VotesPostIdCreationDate
1. VO
 singulars
 PostPostId
 POphp: grabbing user info from database, is this code secure?
 UserUserId
 USSarfraz
 VoteTypeVoteTypeId
 VTFavorite
2. VO
 singulars
 PostPostId
 POphp: grabbing user info from database, is this code secure?
 UserUserId
 USRyan Mentley
 VoteTypeVoteTypeId
 VTFavorite
CommentsPostId
1. This table or related slice is empty.

Querying!

Guidance

A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.